diff options
Diffstat (limited to 'src/config-files/krb5.conf.M')
| -rw-r--r-- | src/config-files/krb5.conf.M | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index bd1c957dab..581a756430 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -118,12 +118,26 @@ the difference between the system clock and the time returned by the KDC and in order to correct for an inaccurate system clock. This corrective factor is only used by the Kerberos library. -.IP checksum_type +.IP kdc_req_checksum_type For compatability with DCE security servers which do not support the default CKSUMTYPE_RSA_MD5 used by this version of Kerberos. Use a value of 2 to use the CKSUMTYPE_RSA_MD4 instead. This applies to DCE 1.1 and earlier. +.IP ap_req_checksum_type +This allows you to set the checksum type used in the authenticator of +KRB_AP_REQ messages. The default value for this type is CKSUMTYPE_RSA_MD5. +For compatibility with applications linked against DCE Kerberos libraries, +use a value of 2 to use the CKSUMTYPE_RSA_MD4 instead. This applies to +DCE 1.1 and earlier. + +.IP safe_checksum_type +This allows you to set the keyed-checksum type used in +KRB_SAFE messages. The default value for this type is CKSUMTYPE_RSA_MD5_DES. +For compatibility with applications linked against DCE Kerberos libraries, +use a value of 3 to use the CKSUMTYPE_RSA_MD4_DES instead. This applies to +DCE 1.1 and earlier. + .IP ccache_type User this parameter on systems which are DCE clients, to specify the type of cache to be created by kinit, or when forwarded tickets are |